Aryaka SmartSecure is designed to complement SmartConnect with managed SD-WAN Security-as-a-Service offerings.

  • At the branch, an access firewall within the ANAP offers ‘north-south’ control, while an optional NFV-based Tier-1 managed firewall offers comprehensive L7 protection.
  • Aryaka Zones extends this to the LAN with ‘east-west’ security, through site-segmentation with policy-based access.
  • The ANAP also supports VRF-based micro-segmentation, enabling multi-tenancy.
  • Aryaka SmartSecure also extends security to the cloud through Aryaka’s security partner ecosystem –
    including Check Point, Zscaler, Palo Alto Networks & Symantec.
  • Next Generation Firewall (NGFW) functionality supported as a Virtual Network Function (VNF).
  • Remote Access solutions (SmartSecure Private Access and VPN Accelerate) optimally support the needs of the hybrid workplace.

Core Capabilities

Cloud Security

Secure, local Internet breakout is enabled through Check Point CloudGuard Connect, Palo Alto’s Prisma Cloud Security Suite, Symantec’s Web Security Service, and Zscaler’s Cloud Security, protecting all ports and protocols.


Micro-segmentation adds to the ANAP’s zones functionality. On-site, VLANs provide the local segmentation for internal and DMZ zones. Micro-segmentation extends this across the Aryaka core network via a BGP-driven VRF ‘lite’ functionality.

Edge Security

Aryaka’s ANAP supports NFV functionality for additional SDN-delivered services. We partner with Tier-1 security vendors such as Check Point and Palo Alto Networks for embedded Next Generation Firewall functionality, enabling choice.

Remote Access Solutions SmartSecure Private Access

SmartSecure Private Access provides a complete solution – including clients – that ideally supports the emerging hybrid workspace.

SmartSecure VPN Accelerate addresses the needs of customers
who want to accelerate their existing VPN solution.

Aryaka Core Protection

In parallel, the Aryaka private core delivers partitioned connectivity to all enterprises, encrypting the data and protecting against DDoS attacks. Within the branch, enterprises have access to Syslog and Netflow logging, and at the network level, the MyAryaka cloud portal provides a single pane of glass for service configuration, monitoring and health.

Secure Access Service Edge (SASE)

Aryaka SmartSecure architecturally integrates cloud-delivered security solutions such as Check Point CloudGuard Connect to deliver on a best-of-breed SASE solution.

Deployment Options


Aryaka SmartSecure integrates advanced Next-Generation Firewall (NGFW) functionality in Aryaka’s ANAP service edge CPE as a VNF (Virtual Network Function). Aryaka can partner with best-of-breed vendors to offer enterprises solutions that are optimally tailored to their particular enterprise architecture and regulatory requirements.


Aryaka SmartSecure provides connectors to leading Cloud-based security platforms from technology partners such as Check Point, Palo Alto Networks, Zscaler and Symantec to support a Cloud-heavy security posture to optimally support enterprises’ adoption of SASE (Secure Access Service Edge) design patterns.

Hybrid Workplace Solution

SmartSecure Private Access is a managed VPN solution that combines superior application performance with complete flexibility in dynamic bandwidth allocation to remote workers or branches. SmartSecure Private Access is a complete VPN solution with device clients for all major desktop and mobile OS and containerized VPN server instances in Aryaka Services PoPs.

VPN Acceleration

SmartSecure VPN Accelerate addresses the needs of customers who want to keep their existing VPN solution (device clients and concentrators), but also want to improve its performance to provide an improved user experience.

Benefits achieved by using Aryaka SmartSecure

Managed SD-WAN Security

With WAN security top-of-mind, Aryaka’s SmartSecure offers enterprises an end-to-end secure infrastructure, first-mile, middle-mile, and into the cloud.

Operational Simplicity

Edge and cloud security leveraging Tier-1 partners is part of Aryaka’s end-to-end managed SD-WAN, hiding complexity from the enterprise.

Lower TCO

SD-WAN security helps enterprises generate the maximum return on their SD-WAN investment, ensuring protection from external threats and the integrity of corporate data, anywhere in the world.

Optimal Hybrid Workplace

SmartSecure remote access solutions optimize the user experience for both remote and branch employees –anytime, anywhere, irrespective of changing traffic loads.

Aryaka’s SmartSecure is aligned with the evolving Secure Access Service Edge (SASE) architecture. Our security offerings cover both the branch and the cloud, offering enterprises the choice of where to deploy their security based on individual requirements. We offer a single operational model and feature set that spans both domains.

Flexibility : Choice Of Optional Security Posture, Location, Edge Or Cloud

Remote Access Capabilities

SmartSecure Private Access provides a complete solution –including clients – that ideally supports the emerging hybrid workspace.

SmartSecure VPN Accelerate (renamed from Aryaka Secure Remote Access) addresses the needs of customers who want to accelerate their existing VPN solution.

Up To 3X Faster Remote Access

Improve produtivity – Reduce complexity and cost

For Remote & Mobile Employees

  • Industry-leading on-premises and cloud/SaaS application performance
  • Access consistently fast data, voice and video from anywhere in the world and collaborate effectively
  • Have the same, superior user experience – whether working remotely or in the office

For IT

  • Deliver on the needs of the emerging hybrid workplace
  • Simplify VPN infrastructure and reduce costs
  • Gain end-to-end network and application visibility
  • Deploy in hours globally with a managed service approach integrated in the Aryaka SmartServices architecture

Aryaka Security Architecture

The Aryaka Private Network delivers true multi-tenant data partitioning though virtualized compute, network, and storage resources. The resulting private backbone is more secure than competing MPLS services where customer traffic is not encrypted. This includes dedicated PoPs located in secured data centers, dedicated Layer 2 links, encryption with IPSec, key management, and DDoS protection. We manage this via a sophisticated orchestration platform, to ensure that your users have assured access to your vital applications and data, anywhere, and at any time.

Aryaka maintains a robust security program that meets internationally accepted security practices.

SOC 2: SSAE-18 Reports against Aryaka’s policies and processes
Cloud Controls Matrix (CCM)
Consensus Assessments Initiative Questionnaire (CAIQ)
ISO 27001:2013
Third party network scan reports available within 48 hours upon request

About Aryaka

Aryaka, the Cloud-First WAN and SASE company, and a Gartner “Voice of the Customer” leader, makes it easy for enterprises to consume network and network security solutions delivered as-a-service for a variety of modern deployments. Aryaka uniquely combines innovative SD-WAN and security technology with a global network and a managed service approach to offer the industry’s best customer and application experience. The company’s customers include hundreds of global enterprises including several in the Fortune 100.

Tips for IT Management

10 Tips for IT Management

How to Thrive During an Economic Downturn

Download Report >